fix: bug in cmstp rule

https://github.com/Neo23x0/sigma/issues/876
2024-11-07 09:48:58 +00:00 · 2020-07-03 11:19:11 +02:00 · 2020-07-03 11:19:11 +02:00 · d12b8347dc
commit d12b8347dc
parent 0bbf40fb14
1 changed files with 1 additions and 1 deletions
--- a/rules/windows/process_creation/win_cmstp_com_object_access.yml
+++ b/rules/windows/process_creation/win_cmstp_com_object_access.yml
@ -23,7 +23,7 @@ logsource:
    product: windows
 detection:
    selection1:
-        ParentCommandLine: '*\DllHost.exe'
+        ParentCommandLine: '*\DllHost.exe *'
    selection2:
        ParentCommandLine:
            - '*{3E5FC7F9-9A51-4367-9063-A120244FBEC7}'